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EXAMINER'S AMENDMENT 

1 . An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview 
with Leonard Heyman on 05/17/2010. 

The application has been amended as follows: 
30. (Currently Amended) A method for using a security apparatus to provide security for a 
computer system, comprising: 

dynamically loading into the security apparatus information permitting detection of 
vulnerabilities and exposures for an application and information on how the security apparatus is 
to prevent exploitation of the vulnerabilities and exposures on the computer system; 

using the security apparatus to intercept data traffic entering the computer system; and 

using the dynamically loaded information to process the intercepted data to prevent 
exploitation of the vulnerabilities and exposures on the computer system, wherein the using the 
dynamically loaded information further comprising using, by the security apparatuSi [[uses]] new 
information on vulnerabilities and exposures to handle new application sessions for the 
application and continuing to use[[s]] old information on vulnerabilities and exposures to handle 
existing application sessions for the application[[;]] 

maintaining a list of which information elements are used by the vulnerabilities and 
exposures; and 
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during processing of the data traffic, decoding only the information elements in the data 
traffic that appear in the list . 

45. (New) The method defined in claim 30 wherein the data traffic includes information 
elements, the method further comprising: 

maintaining a list of which information elements are used by the vulnerabilities and 
exposures; and 

during processing of the data traffic, decoding only the information elements in the data 
traffic that appear in the list. 

2. The following is an examiner's statement of reasons for allowance. The present 
invention is directed to a method for using a security apparatus to prevent exploitation of 
vulnerabilities and exposures on a computer system. More specifically, independent 
claim 1 identifies the uniquely distinct features: using, by the security apparatus, new 
information on vulnerabilities and exposures to handle new application sessions for the 
application and continuing to use old information on vulnerabilities and exposures to 
handle existing application sessions for the application. Teal (US 6,785,821), Hodges 
(US 6,269,456) and Suuronen et al. (US 2003/0145228) disclose dynamically updating 
information on vulnerabilities and exposures (i.e., intrusion or antivirus information); 
however, none teaches or suggests using new information on vulnerabilities and 
exposures to handle new application sessions and continuing to use old information on 
vulnerabilities and exposures to handle existing application sessions. The prior art, 
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taken either singly or in combination, fails to anticipate or fairly suggest the limitations of 
applicant's independent claim, in such a manner that a rejection under 35 U.S.C 102 or 
103 would be proper. The claimed invention is therefore considered to be in condition 
for allowance as being novel and nonobvious over prior art. 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MINH DINH whose telephone number is (571)272-3802. 
The examiner can normally be reached on Mon-Fri: 09:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Minh Dinh/ 
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